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AMENDMENTS TO TTTR CLAIMS 
This listing of claims will replace all prior versions, and listings, of claims in the 

application: 

Listing of claims: 

1 . (currently amended) A method for validating credentials comprising: 
inputting, at a first system that grants session credentials based on successful 
authentication, a request from a client to access a protected resource on the first system, the 
protected resource on the first system being accessible by the client only after successful 
authentication of the client at the first system; 

determining, at the first system lhaL a client docs not have a valid session 
credential granted by the first system; 

retrieving, uf the first system, information from a session token held by the client, 
the information being retrieved from the client, the information corresponding to a session 
credential for the second system, the second system (I) grants session credentials based on 
successful authentication at the second system, and (2) includes a protected resource on the 
second system that is accessible by the client; the protected resource on the second system 
being accessible by the client only after successful authentication of the client at the second 
system; 

the first system presenting at least some of the information from the session 
token to the second system; 

the first system inputting a determination from the second system that the client 
has a valid session credential with the second system; ami 
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( 

the first system effecting successful authentication Lo the client so as to grant 
access, to the protected resource on the first system, to the client based on the determination 
from the second system that ihe client has a valid session credential with the second system* 
and 

directing the client to the first system to esta blish a s e ssion rTed e ntial ba^ on 

successful authentication at the firsi^^m- after determining ^ the clie nt docs a fl have * 
valid session credential Qmisd h Y ^ second &&&ffi 

2. (previously presented) A method according to claim 1 , further comprising 
granting a session credential to the client by the first system, after determining that the client 
has a valid session credential granted by the second system. 

3. (previously presented) A method according to claim 1 , further comprising 
sending a session token to ihe client, the token corresponding to a session credential granted by 
the first system. 

4. (previously presented) A method according to claim 1, further comprising 
directing the client to the second system to establish a session credential based on successful 
authentication at the second system, after determining that the client does not have a valid 
session credential granted by the second system. 

5. (canceled). 

6. (previously presented) A method according to claim I , further comprising 
maintaining the client session credential granted by the second system. 

7. (canceled) 

8. (original) A method according to claim 1 , wherein retrieving information 

3 
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from rhe session token held by the client comprises: 

sending a query to the client from the first system, the query including 
identification as originating from a domain name corresponding to the second system; and 
receiving a response to the query. 

9. (currently amended) A method tor validating session credentials of a 
client comprising: 

inputting, at a first system that grants session credentials based on successful 
authentication, a request from a client to access a protected resource on the first system, the 
protected resource on the first system being accessible by the client only alter successful 
authentication of the client at. the fi rst system; 

determining, at the first system that a client does not have a valid session 
credential granted by the first system; 

retrieving, at the first system, information from a session token held by the client, 
the information being retrieved from the client, the information corresponding to a session 
credential for the second system that grants session credentials based on successful 
authentication at the second system, and the second system including a protected resource that 
is accessible by the client, the retrieving information from the session token held by the client 
comprises receiving a session token from rhe client corresponding to the second system, and the 
protected resource on the second system bcin K accessible by the client only after successful 
authentication of the client at the second system; 

presenting at least some of the information from the session token to the second 

System; 

4 
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determining whether the client has a valid session credential granted by the 
second system, the determining whether the client has a valid session credential granted by the 
second system is at least partially from presenting information from the session token; 

the first system inputting a determination from the second system that the client 
has a valid session credential with the second system; 

granting a session credential to the client on the first system, after determining 
that the client has a valid session credential granted hy the second system; 

sending a session token to the client, the session token corresponding to the 
session credential granted hy the first system, the session token allowing the client access to 
protected resources on rhc first system, so as to provide successful authentication to the client; 
and 

maintaining the client session credential ;..ajod 

rhe first system innuiiinr information frftm the seconj d system, imd in r esponse 
tbgjjlSt sys.tem QMpullinr. l<> the second system, ^termina tion rha ^ iht » first s ystem ^pp a 
yalid SgSgjflU crgfonriql for the client at fl f? first syste m, and 

the second system effecting successful authentic ation s 9 ^ to gremj g^g, t< } the 
further protected resource, on the ggc gnd system, to the c lient bas^l on the determination fmm 
the first system that fflq ? lipnr hgg * v^ij^ y*y™ g-ed fiMaj with the fir s t system . 

1 0. (currently amended) Computer executable software code stored on a 
computer-readable medium and transmitted as an information signal, the code for validating 
credentials, die code comprising: 

code to input, at a first system that grants session credentials based on successful 

5 
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authentication, a request from a client to access a protected resource on the first system, the 
protected resource on the first system being accessible by the client only after successful 
authentication of the client at the first system; 

code to determine, at the first system, that a client does not have a valid session 
credential granted by the first system; 

code ro retrieve, at the first system, information from a session token held by the 
client, the information corresponding to a session credential for the second system that grants 
session credentials based on successful authentication at the second system, the second system 
including a protected resource that is accessible by the client, and the protected resource on the 
second system being accessible by the client only after successful authentication of the client at 
the second system; 

code to present at least some of the information from the session token to the 
second system; and 

code to input, from the second system to the first system, a determination 
whether the clienL has a valid session credential granted by the second system; and 

code to effect successful authentication so as to grant access to the protected 

resource on the first system, to the client based on the determination from the second system 

that the client has a valid session credential with the second systernymd 

■ code to direct the. chVnt to the fir^ system to est ablish a ^cssion c r edential l^ed 

on successful aulheMcation at the first . system, afte r dctcmiin^ that th e cl ient o^ocs not hav^ 

vnlidjiess.ion cred ential granic^ frY the s^nnH sy stem . 

1 1 . (previously presented) A computer readable medium having computer 

6 
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executable code stored thereon, the code fur validating credentials, Lhe code Comprising; 
code to input, at a first system that grunts session credentials based on successful authentication, 
a request from a client to access a protected resource on the first system, the protected resource 
on the first system being accessible by the client only after successful authentication of the 
client at the first system; 

code to determine, at the first system that the client does not have n valid session 
credential granted by the first system; 

code to retrieve from the client, at the first system, information from a session 
token held by the client, the information corresponding to a possible session credential for the 
second system that grants session credentials based on successful authentication at the second 
system and thai: has a protected resource that is accessible by the client, the protected resource 
on the second system being accessible by the client only after successful authentication of the 
client at the second system; 

code to present at least some of the information from the session token to the 
second system; and 

code to input, from the second system to the first system, a determination 
whether the client has a valid session credential granted by the second system; and 

code to cfrccl successful authentication to the client so as to grant access to the 
protected resource on the firsr system, to the client based on die determination from the second 
system that the client has a valid session credential with the second system.. 

12. (currently amended) A programmed computer lor validating 
credentials, comprising: 

7 
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a memory having at least one region for storing computer executable program 

code; and 

a processor for executing the program code stored in the memory, wherein the 
program code comprises: 

code to input, at a first system that grants session credentials based on successful authentication, 
a request from a client to access a protected resource on the first system, the protected resource 
on the first system being accessible by the client only after successful authentication of the 
client at the first system; 

code to determine, at the fust system that the client does not have a valid session 
Credential granted by the first system; 

code to retrieve, at the. first system, information from a session token held by the 
client, the information corresponding to a session credential for the second system that grants 
session credentials based on successful authentication at the second system, the second system 
including a protected resource that is accessible by the client, the protected resource on the 
second system being accessible by the client only after successful authentication of the client at 
the second system; 

code to present at least some of the information from the session token to the 
second system; and 

code to input, from the second system to the first system, a determination 
whether the client has a valid session credential granted by the second system and 

code to effect successful authentication so as to gram access to the protected 

resource on the first system, to the client based on the determination from rhe second system 
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that the client has a valid session credential with the second system; 

code to direct the, clie nt to the firsi , s^sjgrj] tQ C^ bfejL 

.QP^ucccssfiil. authentication at the first system r after de termining that thg client does not ha vjqj 
valid s ession credential fffflnted hv the second syste m,; 

code to input in to the first system information from the seeing' svsr*m »mj_»> 

itspmijffi, mam tmm tbS first system, to the second system, a determine™ that t he first 
system has ; uttdid,sess ion credential for the, client at th e fi rst system , nnd 

Code to effect Successful authentication with ifr^-emnri syst em so as to grant 

access, to the farther prou^cgd^resource on the s econd sysjenv to the cli ent based on the 
determination from the first system that the client has n valid masi gn credentia l with the first 
SYfftgm. 

13. (currently amended) A method for establishing session credentials 

comprising: 

inputting, at a first system that grants session credentials based on successful 
authentication, a request from a client to access a protected resource on the first system, the 
protected resource on the first system being accessible by the client only after successful 
authentication of the client at the first system; 

determining at the first system that the client does not have a valid session 
credential granted by a first system; 

determining that the client does not have a valid session credential granted by a 

second system based on successful authentication at the second system; 

sending, from the first system to the client, a log in page; 

9 
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receiving, at the first system from the client, log in information; 
sending, from the first system to the second system, the log in information; and 
receiving, at the first system from the second system, information corresponding 
to a session credential granted by the second system, the session credential granted by the 
second system based al least in part on the log in information and successful authentication at 
the second system, the second system being one that (1) grants session credentials based on 
successful authentication at the second system, and (2) includes a protected resource on the 
second system that is accessible by the client, the protected resource on the second system 
heing accessible by the client only after successful authentication of the client at the second 
system; and 

the first system effecting successful authentication so as to grant access, to a 
protected resource on the first system, to the client based on the determination from the second 
system that the client lias a valid session credential with the second system; 

the first system inputting in formation from th e second system, and in response, 
thefirst system outouttme. to djc second system, a dcicrmini^ on that the fus t system has a 
valid session credential fnr the client at the fi rst system, and 

_ foe seppncUystcm effect i ng successfu l aiithentica^jjyn so ;k to g rant acq ps s, in th* 

further protected resource on the second s yste m, to the c lient based on th e deterioration fm m 
the first system thai Lky die.m ha* a valid gffifrn credentia l with the first sysrr.m 

14. (previously presented) A method according to claim 13, further 
comprising granting a session credential for the first system. 

1 5. (previously presented) A method according to claim 13, further 

10 
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comprising granting a session credential for the second system. 

I tf. (previously presented) A method according to claim 1 3, further 
comprising associating session credentials for the first system and the second system with the 
client. 

17. (currently amended) A method for establishing session credentials lor a 
client, the method comprising: 

inputting, at a first system that grants session credentials based on successful 
authentication, a request from a client to access a protected resource on the first system, the 
protected resource on the first system being accessible by the client only alter successful 
authentication of the client at the fust system; 

determining that the client does not have a valid session credential granted by the 

first system; 

inputting information at the first system, from the second system, that the client 
does not have a valid session credential granted by the second system, the second system 
including a protected resource, tlit: protected resource on the .second system being accessible by 
the client only after successful authentication of the client at the second system; 

sending, from the second system to the client, a log in page; 

receiving, at the second system from the client, log in information; and 

sending, from the second system to the first system, information corresponding 
to a session credential granted by the second system, the session credential granted by the 
second system based at least in part on the log in information and successful authentication at 
the second system; and 

I! 
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granting a session credential to the client for the tirsl system so as to provide 
successful authentication, such that the client is granted access l:o a protected resource on the 
llrsL system; 

III? first system inpuiting^ptbrmntion from the second system and i n, response. 

the first Sysiteia. outPUUing. to the second system, a determination th at th e first sy st em hn<: a 
valid s,es>s_ij) n cp^eptial for the diem at th e first sys t em, and 

the second system effecting sugCS^ii yiithr.ntirntio n so as tft tf rant aceg ss , to the 

JMiSLESMsd resource on the second sys tem, to the c lie nt based m the deter mination from 
iiiejj.rst.svstem that the client has a valid session cred ential w^h the fii^t 

18. (original) A method according to claim 17, further comprising granting a 
session credential for the second system. 

19. (original) A method according to claim 17, further comprising associating 
session credentials for the first system and the second system with the client. 

20. (previously presented) A method for validating credentials comprising: 
inputting, at a first system that grants session credentials based on successful 

authentication, a request from a client to access a protected resource on the first system 
determining, at the first system that a client does not have a valid session 

credential granted by the first system; 

redirecting the client to the second system that grants session credentials based 

on successful authentication at the second system, the second system having a protected 

resource that is accessible by the client; 

sending, from the second system to the first system, session credentials granted 

12 . 
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hy the second system; 

sending, from the first system to the second system, the session credentials 
granted by the second system; 

determining, at the second system, that the session credentials granted by the 
second system, and received from the first system, are valid; and 

sending, from the second system to the first system, information indicating that 
the session credentials granted by the second system are valid; and 

inputting, at the second system that grants session credentials based on 
successful authentication, a request from a client to access a protected resource on the second 
- system 1 

determining, at the second system that a client docs not have a valid session 
credential granted by the second system; 

redirecting the client to the first system that grants session credentials based on 
successful authentication at the first system; 

sending, from the first system to the second system, session credentials granted 
by the first system; 

sending, from the second system Lo the first system, the session credentials 
granted by the first system; 

determining, at the first system, that (he session credenfmls granted by the first 
system, and received from the second system, arc valid, and 

sending, from ihe first system to the second system, information indicating that 
the session credentials granted by the first system are valid. 

13 
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21. (canceled) 

22. (canceled) 

23. (currently amended) A method for validating credentials comprising: 
inputting, at a first system that grants session credentials based on successful 

authentication, a request from a client to access a protected resource on the first system, the 
protected resource being accessible upon successful authentication of the client at the first 
system; 

determining, at the first system that the client docs not have a valid session 
credential granted by the first system, so as to allow the client access to the protected resource 
on the first system;. 

die first system communicating with a second system, the second system having 
a further protected resource on the second system, the further protected resource being 
accessible upon successful authentication of the client at the second system; 

the first system presenting information to the second system; 

the first system inputting a determination from the second system that the client 
has a valid session credential with the second system; ami 

the first system effecting successful authentication so as to grant access, to the 
protected resource on the first system, to the client, based on the determination from the second 
system that the client has a valid session credential with the second system^ 

the first system inputting jriftirmiirinn fmm th e seco n d svsrem . and in reppnns^ 

the first s v&tem outputtin^o the second syst em, a dete rmination that the firs t svsrem 

valid SSSS&S credential for the client at 1 he . first system; and 

14 
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lhe second system effecting successful authentic ation ^ a* £q r* nt accey ^i p fchg fu rih^r 

protected resource on the scci^ syst em^ to th e client j ja yed on th e determination from t he first 
system that the t^jjent has a valid session crede ntial with t ht> first svfitqm . 

24. (canceled) 

25. (currently amended) The method of claim ^422, wherein the protected 
resource in the first system includes content provided on a pay-per-usc basis, and wherein the 
protected resource in the second system includes content provided on a puy-pcr-usc basis. 

26. (currently amended) The method of claim 2422, wherein the protected 
resource in lhe first system includes content provided on a subscription basis, and wherein the 
protected resource in the second system includes content provided on a subscription basis. 
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